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SOFTWARE APPLICA TION DEVELOPMENT SYSTEM 

This invention relates to a software application 
development system especially but not exclusively for use 
\yith computer based cash transaction devices such as 
automatic teller machines, kiosks, electronic point of 
£jale systems and home PC's. 

T;he use of electronic cash machines for the above and 
similar purposes is a rapidly growing market . There are 
many different hardware manufacturers providing this type 
of equipment and each manufacturer will generally have 
systems that operate in a different manner. This poses 
problems for users of the systems such as banks as, if 
tjley wish to use equipment from more than one 
manufacturer then they will require to have the same 
basic applications specifically adapted to run on each 
system. Similarly different users using the same 
manufacturers hardware and having the same basic 
application requirements will wish these applications to 
operate differently in accordance with their own 
preferred customer presentation requirements. Changes in 
ecjuipment also necessitate a redevelopment of 
applications. Such a multiplication of systems 
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inevitably introduces potential areas of breakdown. An 
increasing reliance on such systems means that system 
reliability is of the utmost importance. 

It is an object of the present invention to provide a 
^system that obviates or mitigates these disadvantages. 

According to the present invention there is provided a 
software application development system especially but 
not exclusively for use with cash transaction terminals 
comprising a software platform for development of 
functional applications for said transaction terminals, 
^aid software platform having means for interacting with 
ci plurality of distinctive hardware systems and having 
customisable means for presentation of said functional 
applications to cash transaction terminal users. 

ihe cash transaction terminals may, for example, be 
Automatic teller machines, kiosks, electronic point of 
sale machines, home or office PC's and the like. 

Preferably the system makes use of the WOSA XFS standard 
for interacting with different hardware systems . 

Preferably also the system uses a web browser as an 
application package. 

Preferably also the system includes support for a 
plurality of communication standards. 

Preferably also the system includes standard transaction 
objects or application functions for standard cash 
transaction terminal functions- 
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More preferably said application functions can operate 
( independently and communicate with different user 

interfaces. 

preferably also the use of a web browser provides support 
for software distribution and network connections. 



t 



Specific embodiments of a software application 
development system in accordance with the present 
invention are described in the following technical 
description- 



t 
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.Introduction 

Kalypso is a "middleware" software platform from KAL for 
ATMs, kiosks, EPOS systems and Home PCs. It is an 
enabling technology that allows high performance mission- 
critical applications to be developed for these rapidly 
growing markets. Kalypso allows a single application to 
be developed to run across all of these delivery systems 
Vith built-in support for Internet/ Intranet access. 
Falypso combines the best of Net technology with 
multimedia, transaction processing and self service 
€*xpertise to deliver a state-of-the-art software 
platform. 

Kalypso is an OEM software product and is targeted for 
use by major vendors such as IBM, NCR, SNI , Diebold, 
Eujitsu/ICL, Bull, HP/Verifone etc. It is a highly open 
architecture that allows various levels of customisation 
and extensions to be carried out as necessary. Kalypso 
has a carefully thought out architecture that allows 
various experts to interact with the system in a safe and 
productive manner. For example, it is possible for the 
application development to be split-up between 
application experts, multimedia specialists, systems 
engineers etc such that large mission-critical 
applications can be designed quickly, efficiently and 
ajDOve all robustly, 

W<£ have also designed a business model for the Kalypso 
environment with great care. This allows the different 
organisations participating in the development of a final 
system to protect their IPR 1 and all reusable software 



1 Intellectual Property Rights 
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components, while continuing to provide the end-user 
customer with the flexibility that he needs. 

pections 1 -4 are intended as an overview of the Kalypso 
poncept . 

yhe Software Architecture from 3000Q ft 

^Calypso is a middleware layer that essentially sits 
between the Operating System and the application 2 . 



Application 



t 



t 



Kalypso 



Operating System 



This is the view at "runtime" on the kiosk/ATM. At 
development time, Kalypso provides various tools such as 
a hardware simulator that allows applications to be 
developed quickly and easily. 

Kalypso currently supports two operating systems - 
Windows NT and OS/2 Warp. This document will describe the 
features from the Windows NT perspective. 

If you look at Kalypso. from the bottom-up, Kalypso is in 
many ways an Operating System (OS) itself. Having said 
that, it isn't an OS in that it runs on Windows NT and 
does not duplicate anything that NT itself does. Instead 
Kajilypso extends NT for the kiosk arena, fully utilizing 
all of NT's features. 



2 Reality is a little bit more complicated than this. 
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On the other hand if you look at it from the top-down, 
Kalypso is almost an application - a complete ATM cash 



.top-level Kalypso components (known as Wizards) together. 
However, Kalypso is not an -application - it provides the 
building blocks required to create a standard application 
or a fully customised application. Kalypso applications 
#re normally run within a Web Browser (such as 
Microsoft's Internet Explorer for Windows NT) 3 . 

You might wonder whether it is a canned application with 
?ome customization - well it isn't that either. Kalypso 
provides a multi-layered open interface that allows 
application development to be carried out at the deepest 
level that you wish to. Systems engineers can extend the 
software at the lower levels, grappling with issues such 
as mult i -threading, concurrency and re-entrancy, while 
graphics designers can design the application at the top 
levels by combining graphics, video and sound. 



The openness and extendibility described above does not 
mean that you lose control of the application when you 
deliver it to your customer - we have designed a careful 
business model to allow components to be "owned" by 
different organizations and or different team members so 
tjiat issues such as warranty, support, IPR 4 etc can be 
held in a distributed manner providing maximum 
flexibility and a "win-win" scenario for all 
participating organizations. The following is an example 
of the types of division of responsibility that is 
supported by Kalypso. 



3 Internet Explorer is run in "kiosk mode", which is full screen mode without titfe/menu/status 
bafs etc. 

4 Intellectual Property Rights 



•application can be created in a few minutes by combining 
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Language specialists for 
translation 



Graphics specialists for 
multimedia 



Comms engineers for 
network/host etc 



Application specialists 
for application flow 



Application engineers for 
application components 



Systems engineers for 
device support 



I£ach of the above may be drawn from the same organisation 
or may be drawn from third party companies as necessary* 
In addition, the customer's own technical dept may be 
involved in some of the above, as well as the following: 



| Application 
customisation 



Graphics 
customisation 



Software 
download 



Network 
monitoring 



Kalypso has been designed with the real world in mind. We 
a£e aware that expertise is distributed and that a wide 
r^nge of experts are involved in the creation and 
maintenance of a mission-critical kiosk application. 
K^y features 

Kalypso provides you with a wide range of features that 
wq.ll enable you to create outstanding applications for 
the ATM/Kiosk/ EPOS/Home PC market. 
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WOSA XFS support 



« Self service 
support 



Object-Oriented 
API 



ActiveX device 
interface 
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WOSA XFS is an open standard from the 
BSVC (Banking Systems Vendor Council) 
that provides vendor independent access 
to hardware on a kiosk or ATM. Full 
support for WOSA XFS means that a 
Kalypso application can be ported to 
various hardware platforms with relative 
ease. 

Kalypso is designed for self service 
use. KAL has substantial expertise in 
developing systems software and 
applications software for ATMs, Kiosks 
and EFTPOS terminals . Kalypso gives the 
highest priority to issues such as 
software robustness, availability, low 
maintenance, remote monitoring and crash 
recovery. 

An OO interface provides access for 
systems programmers to extend the 
systems software. This makes it easy to 
add new or non-standard devices with or 
without help from KAL . 

Under Windows NT, ActiveX components 
provide the basic building blocks for 
creating applications within a web 
browser (MS IE) . The Kalypso device 
interface gives maximum flexibility for 
expert programmers to fully exploit all 
hardware features . 



t 
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• ActiveX Wizards 



? Concurrency 



* Multi Processing 
support 



• Multimedia support 



* Internet support 



* . Intranet support 



Wizards implemented as ActiveX controls 
provide configurable "chunks" of 
application that can be quickly, combined 
together to create final applications. 
Wizards can be customized with 
application-specific graphics and 
multimedia very easily. 

Kalypso has a fully concurrent 
architecture- All devices including host 
access and the screen display can be 
accessed in a concurrent (ie fully 
parallel ) manner . 

Kalypso has been designed with multi- 
processing and multi-threading 
applications in mind. Kalypso is thread- 
safe and supports multiple co-operating 
applications . 

Full support for all multimedia features 
such as video, sound, graphics is 
provided in a hardware independent 
manner by exploiting Windows NT support 
for these features. 

Kalypso applications are hosted within a 
web browser such as Microsoft's Internet 
Explorer 5 . Full Internet functionality 
is made available by this choice. 

Use of a browser means that Intranet 
support is also built-in. 



s Ifalypso applications can also be written independent ot a browser if wished. Applications 
cap be written completely in C, C++, Visual Basic etc drawing upon the Kalypso APIs, ff 
preferred. Kalypso also supports Authoring tools such as Icon Author from Aimtech Corp. 
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Applications can be created using tliis 
technology even if an Intranet 
connection is not available. This allows 
applications to be Intranet-ready from 
day one. The complete application would 
reside on the local hard disk in that 
case . 

Kalypso allows legacy comms to be 
supported concurrently with 
Intranet/Internet support. This means 
that there isn't an either/or choice 
between Intranet technology and 
connection to Legacy systems. 

Kalypso provides support for a legacy 
comms in a generic way using an Open 
Standard- This means that applications 
can be developed independent of the 
actual legacy protocol (s) . This Intranet 
compatible generic messaging protocol 
can be customized and extended as 
necessary- This allows applications to 
be created that are not just independent 
of the legacy protocol 6 , but can migrate 
to Intranet/Internet transactions when 
the Host is ready to do soi 

This allows various connection 
topologies to be used while still 
maintaining Intranet-ready status (even 
in standalone mode) . 



6 Protocol independence is at the "Application Layer level of the OSI model providing 
maximum isolation. 



24-03-98 15:05 +4401412266838 
j-g8 ' 15:G5 KENNEIjA^ND CO 



P. 14 K-I*b jqd-o«h> 

I^h44S141 2 2 66838 



P . 14 



• Robustness 



Openness 



Client -Server 
support 



Transaction 
•monitoring 
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A range of" technical features provide 
robustness for mission-critical 
applications. Our design philosophy 
maximises the probability of software 
errors being detected as early as 
possible at development/test time rather 
than at runtime in the field. This 
applies not just for systems software 
but also for application software. 

Kalypso has a fully open architecture. 
All API's will soon be publicly 
available- Kalypso implements support 
for a range of open standards including: 

• WOSA XFS 

• ActiveX 

• HTML and various Internet standards 

• OFX 

• SNMP 

Open development tools (Internet tools 
etc) . 

Kalypso was designed with support for 
client-server issues between the 
ATM/kiosk and the backoff ice in mind. 
Kalypso supports transaction 
technologies such as Microsoft 
Transaction server and messaging 
protocols such as OFX. 

Kalypso provides support for Transaction 
monitors such as NCR's TOPEND. This 
provides guaranteed transaction commits 
and load balancing for large systems. 
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Use of Internet 
development tools 



visual development 



Development time 
environment 



• State of Health 
monitoring 

• Software Download 
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Kalypso applications are developed using 
Internet Authoring Tools . There are a 
very wide range of tools available and 
this is an area that is evolving very 
fast-. For the NT/ IE environment, our 
recommended choice is Visual Studio 
combined with Front Page from Microsoft. 
However, any Internet tool set can be 
used due to Kalypso 's support for 
Internet standards. Applications can be 
written using C, C++, Java, Visual 
Basic, Javascript, VBScript etc. Java 
applets may run side by side with 
ActiveX components . 

The development environment is based on 
Internet tools as mentioned above and is 
highly visual and interactive. 

At development time, Kalypso provides 
support via tools such as simulators to 
allow applications to be developed and 
tested on development PCs. 

Kalypso provides support for SNMP and 
remote state of health monitoring by 
interfacing with standard systems. 

Kalypso provides support for Remote 
Software Download by interfacing with 
standard systems such as SMS . 



t 



As you can see, in many ways, Kalypso is an Operating 
System- However, it does not duplicate any features of 
windows NT. Instead, Kalypso provides the operating 
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environment that is needed for creating robust kiosk/ATM 
•applications. It does this all the way from the lowest 
level up to the top level of the application - this means 
that you may choose to change or customize it as little 
&s you want or as much as you want. We call this strategy 
an ASOS - Application Specific Operating System. 
pilvDso benefits 



t 



t 



%o OEMs 

s Kalypso provides an outstanding environment for 

creating kiosk/ATM/EPOS/Home PC applications in an Open 
and Flexible manner. 

Kalypso 's technical achievements put it at the 
. forefront of kiosk technology. It's support for WOSA 
XFS means that Kalypso can provide support for ATM 
vendor hardware quickly and easily by leveraging off 
.. their own WOSA XFS service providers . 

• KAL's business model allows the OEM to gain access to 
this software with no upfront investment. License fees 
are due only when Kalypso based systems become live at 
your customer sites. KAL has a simple license fee 
structure based on a one-off charge per kiosk/ATM. 

• Kalypso 's ability to provide support across a range of 

: markets, means that you need to train your engineers in 
only a single set of application tools. 

• Kalypso 's ability to create Intranet-ready applications 
even when there Isn't an actual Intranet/ Internet 
connection means that there is only one application 
environment that needs to be considered - the Intranet 
environment . 



A 
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To end— user customers {eg Banks etc) 

• Access to the latest and best technologies combining 
Intranet /multimedia/PC technologies with Self 
Service/transaction processing technologies. 

r Banks can develop a single Tntranet-ready application 
to run across all their kiosk/ATM/EPOS/Home PC 
environments independent of hardware differences and 
independent of the type of comms connection (s) being 
used. 

*i Stand-alone kiosks as well as LAN based kiosks can use 
: the same Intranet technology even if only legacy comms 
. is being used. This allows Banks to migrate to new 
technologies at a comfortable and evolutionary pace. 

• Banks can choose to take as much control or as little 
; control of application development as they feel 

comfortable with, in co-operation with you. 

• Banks can setup a dual supplier strategy without being 
. forced to maintain separate applications . 

Cpncepts. Ideas and Know-How 

T^iis section details the concepts that we wish to patent 
arid protect. 

Tpp-level Concepts — The Environment 

We set out the top-level concepts, including those ideas 
that are public domain, in order to set the context. 



Concept 



Description 



1 ;use of PC Tools 



Historically/ ATM software applications 
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have been created using custom tool sets 
developed by the hardware vendors 
specifically for their own hardware. Our 
idea was to allow generic PC software 
development tools to be used in the ATM 
environment, (Most new ATMs are PC- 
based) . As general tools were not 
designed with the special features of 
ATMs in mind (eg cash dispensers) , 
Kalypso provides the missing 
functionality through an object library* 
(This, idea is likely to be public 
domain) . 


2. PC Tools - 
' usability 


Generic tools from companies like 
Microsoft have outstanding usability 
features- Kalypso allows these tools to 
be used on an ATM bringing the 
advantages of the sophisticated PC 
software tools market to ATMs - (Public 
domain?) . 


3- - PC Tools - 
features 


PC tools have many more functional 
features than existing ATM-specific 
software tools. This brings substantial 
new software features to the ATM market. 


4> Use of a Web 
Browser 


Kalypso uses a web browser (such as 
Microsoft's IE) as the "container" for 
the ATM application - 


5; Web-ATM 


Use of a browser allows ATMs to be web- 
enabled. 


6,; Web tools for 
. development 


Use of a browser means that ATM 
applications can be created using web 
tools such as Microsoft FrontPage. Web 
tools attract massive investment from 
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the software industry and acquire new 
features rapidly. Kalypso allows these 
technologies to be applied to ATMs. 



1 -Application has 
access to various 
technologies 



p . "COM" based 
architecture 



The top level application can be written 
using the Kalypso ActiveX controls plus 
external components from other vendors. 
These external components can be written 
using ActiveX Controls, Javabeans, Java 
applets, VBScript, Javascript or HTML. 
(Public domain) * 

Kalypso conforms to Microsoft's COM 



architecture for software components . 
This makes it easy to add new components 
from different vendors in creating the 
final application- (Public domain). 



9-Use of WOSA XFS 



Kalypso uses the WOSA XFS open standard 
to support the ATM hardware in a vendor- 
independent manner. (Public domain). 



1 0 . Web- WOSA 



T1 -Multi-Platform 
. support 



Kalypso is the world's first ever 
implementation of a WOSA XFS compliant 
web-ATM. (Public domain?) . IBM press 
release 27 th August 97. 

The WOSA XFS compliance allows Kalypso 



1 2 . Support For" 
: Legacy host 
: computers 



to provide hardware independence, this 
means that a Kalypso application can be 
ported to different hardware platforms 
with relative ease. (Public domain). 



ATMs need to interface with remote host 
computers of various vintage- Kalypso 
will provide host-independent support 
for ATMs using the OFX open standard. 
(The OFX standard is public domain for 
PCs, but has never been used for ATMs. 
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TTTGeneric couims 
support 



TTTstatus 
monitoring 



Software 
Distribution 



THe-^a^^ 

use) . 



^T^T-OFX^eans that K^P^" 
apP lications are independent of the 
peculiarities of the host interface. 
This allows a Kalypso application to be 
ported to a new host environment with 
relative ease. (Public domain) - 
Kily^T uses the SNMF -open s^al^to- 
mo nitor the status of the ATM. Alerts 
and status messages can be sent to a 
remote monitoring station in this way. 
(Public domain) . 



T6-ATM can oe 
: connected to the 
■ Internet, an 
Intranet or an 
Extranet 



17 .ATM can run 
"standalone" 



Kaly pso *s suppot-^ To^w^bTowier^ 
means that the browser's ability to 
download content from remote servers can 
be used for electronic software 
distribution. Kalypso will also 
interface with formal software 
distribution systems such as the web- 
push technologies and non-web oriented 
systems such as Netview and SMS. 



intranet or Extranet connection or 
in deed with a connection to the Internet 
itself- (Public domain). 



TE^Ii^o^-bro^r-Xe^logy doe^T 
me an that a Kalypso applications are 
dependent on a web connection. The 
application can be fully loaded on to 
«x. ATM hard disk allowing the ATM or 
kl osk to run «standalone^bl^ 
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"\ 6 ^Robustness 



SoEuStn-"* « sj-snSTaT imports EST 
ATMs and kick.. Kalypso »s« - range <* 

,j oat . f 0 r robustness. In 
public domain idea, tor 

addition, the following unique idea 
enhances robustness: 



The Kalypso middleware requires 
applications to interact with it *» a 
wel l defined way- Even the tiniest 
transgression from this is detected and 
flagged by Kalypso as a "fatal error". 
F atal errors result in the current 
environment being abandoned and the 
application is killed-off by Kalypso. 

This means that even minor errors in the 
application can result in a major error 
condition. Host software components do 
not do this, but instead choose to 
ig nore what is seen as minor errors. Our 
view on this is that that allows 

<, survive undetected 
application errors to survi 

within applications- 

v -t-rateav of escalating 
The result of our strategy 

errors to maximum seriousness, » that 
errors are found early at development 

to reach a live environment. On the 
otherhand, this technique potentially 
runs the ris* of a fatal error be.ng 
reported in the £ ieldJor j: ha 1 r !: ^ 
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T9 . Security 



t 



120 .openness 



considered a non-serious situation - 
However, in return for taking this risk, 
the application achieves outstanding 
robustness as all errors tend to be 
detected before the software goes to the 
field. 

The technique of detecting errors in 
this way is called "assertion" in 
software engineering- This is a public 
domain idea- However, our contribution 
is to assert absolutely all disallowed 
cases whether serious or not. This 
results in a highly robust final 
application. (At KAL we regularly 
achieve zero defect software releases 
even for large systems - a rare 
occurrence in the software industry) ■ 



The first level ot s ecurity ia — 
digital certificates that are carried by 
all our ActiveX controls. (Public 
Domain) - In addition each Kalypso 
control can be turned on or off using 
the security control. Please see the 

next section for details- ^ 

Kalypso uses va rious open standards to " 



provide an open environment for 
developers, in addition, Kalypso can be 
accessed at several levels depending on 
the level of control required by the 
application developer. At the top-level 
a developer can use the Kalypso wizards 
Alternatively, if the wizards do not 
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2lTClient-server 
support 



~22. Scalability 



"TS-ATM simulator 



24 .Development 
environment on 

ATM 



^^vTdlfWe^^ 

application can directly access the 
device controls etc. 



KiOyp^o-inXc^i^^ 

applications to be developed, with 
Kalypso running on the client. (Public 
domain) - See next point - 



■ nforfaees wxth Tr ansae uxwn 
Kalypso interlaces wj. 



an 



"^5 .Unique 
; combination of 
concepts 



Pressing (TP) Monitor, such as Topend 
from NCR and three-tier TP servers such ^ 
as MTS from Microsoft to allow scaleable 
client-server systems to be developed. 

(Public domain) - 

!OTLy1*^inl^^ 



hardware that allows Kalypso 
applications to be developed and tested 

on a PC (Public doma in) . 

"Thl^aTypi^^^ 

De run on an ATM. making it easier for 
applications to be developed and tested. 
(Public domain) - t 

some are in the public domain, and 
others not- The combination of these 
concepts to form the final Kalypso 
concept is believed to be unique, and 
not in the public doma in. 
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Top 



-level Concepts 



- TJie Software Architecture 



Concept 



T7*Calypso is a 
Middleware 
component 



t 



f 



"ST.Kalypso consiaLi> 
of Five sub 
systems 



Description 



| WebJ Sr owser^ j 

|" Kalypso^ j 

j~ Windows NT ] 



hPtween the web browser and 
Kalypso sits between 

the operating system. It provides the 
ATM-specific services needed by the 
browser to run the end-userjpp^icati^ 



Wizards J 


Device 
Controls 




Self service 
Controls 


Cornms 
Controls 



Status 
Monitoring 



The bottom layer 

. The device controls provide hardware 
independent access to the special 
devices on the ATM or kiosk- 
. The self service controls provide 
functionality that is necessary for 
creating self-services applications. 
. The comxns controls provide access to 
the remote host computers using the 
OFX standard. 

. ^^^n c-vstem monitors 
- The status monitoring sys^ 
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TTOse of "cuM" 



4. Wizaras 



-as-^ ith ot the T ^M-sTKisnr^a - 

sends status and alerts to an external 
monitoring nation using SNMP alerts. 

The top' layer 

ar p "transaction objects" 
• The wizards are 

that implement commonly used 
transactions on ATMs - (eg dispense 
cash - known as «f astcash" , print a 

statement etc) - 



of «COM" components with an ActiveX 
interface. (Com and ActiveX are 
Microsoft technologies- ActiveX 
components are web-enabled, are 
downloadable by a browser, Polish the.r 
interfaces, and can manage software 
•~r^ These are published 

Microsoft technolog ies . 

KiTTy^^T-wT^^^ 



important concept within Kalypso. 
wizard is a "chunk" of re-usable 
functionality. It is part of an 
application. For example there will be a 
Kalypso wizard that creates a statement 
pri r t and another one for f astcash* . The 
wizards have a unique and powerful 
architecture-- 

X wizard is indented as an ActiveX 
object that is responsible for a 
transaction. When theapplicationj^ 



• The wizards are currently under development 
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_ ie the wizard is the application while 
it is running. An application would 
consist of several wizards. 

Wizards encapsulate all of the features 
and functionality required by that 
particular transaction (or chunk of 
application). However, the wizard as 
completely independent of the user 
interface. That means that the visual 
appearance and the way of interacting 
with the wizard can be changed from 
application to application without 
affecting the self service knowledge 
within the wizard. The encapsulated 
features within the wizard can be reused 
between different applications even 
though the look and feel, could be 
completely different. 

ActiveX technology was found to be ideal 
for implementing wizards . Kalypso 
wizards interface use the Kalypso dev.ce 
controls and the other sub systems 
(comms, self servxce etc) and encode all 
of the top-level control logic within ^ 
the wizard, m order to separate out tne 
user interface, the wizard outputs xt 
state as a set of ActiveX events, and. 
receives input via ActiveX properties 
and methods - 
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can b= placed on a browser page It is 
invisible to the user at this stage out 
is able to perform the ATM transaction. 
using tools, a web ^signer can now 

build the user interface around the 
wi2 ard. without any risk of compromise 
the self service knowledge within the 
wizard. The designer can layout buttons, 
graphics, hotspots. videos as he wishes. 
L can make these buttons send messages 
to th e- wizard, and can make the visual 
content react to the events emanating 
form th e wizard. The technology needed 

, , m the wizard to these user 
to connect up tne 

. _» s is standard to web 

interface elements is 

browsers . 

Now this means that the ATM transaction 
ca n look completely different *™ 
two banks, for instance, even though the 
critical ATM code is exactly the same. 
For instance, one bank could have a 

savs dispense $10 and 
single button that says ax p 

• ^,f a re and allow 
have no other user interface, a 

the ATM to dispense the cash, while the 
other bank could have multiple graphics 

j „ideos which run 
and animations and videos 

concurrently and react to the different 
stages within the wizard, (eg when the 
wizard is counting the cash, it could 
run an animation showing the cash being 
counted, ana when theca^presented. 
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video of =o«. e saying "please take 
„ nr cash") - Even though the look and 
f „l of the application is .assively 
dl « e «,t, the underlying logic «uld 
exactly' the sa«. -°uld be reusable 
b etween applications, and would be very 
robust - as it needs to bs written only 
once and is used again and aga.n. 

R huge benefit to banks is that the look 
and feel of the application can be 

-i w hv a araphics person 
changed regularly by a g P 

I -cwinrt the -correctness" of the 
| without risking nn« 

application. 

The benefit to developers is that new 
applications can be created very quxCcly 
and easily and can have a completely 
different look and feel. 

As the wizards *re built on the device 
controls and comms controls, it means 
that these wizards can be reused on 
different hardware platforms and with 
different host connections without 
affecting the implementation of the 
wizard- 

^ ffln re essential feature 
Wizards have one more esse 

- they are able to interpret the 

capabilities of the hardware. This means 

, , ^ a bie to perform a 
that a Wizard is aDJ-e f 
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5\ The Device 
• Controls 



capability- For example consider the 
differences between a motorized card 
reader and a swipe card reader. In the 
first case, the wizard must eject the 
card and tell the user to take the card, 
in the latter case, the wizard does not 
need to do that. Kalypso wizards allow 
applications to run across differing 
hardware capabilities- This is an 
essential part of Kalypso's support for 
Extranets. It allows an application to 
be run on non-homogeneous networks of 
kiosks and ATMs. 



TKiT cievice cont rols provxde-halFdTTa^T 
independent access to the special 
devices on the ATM or kiosk. Each device 
control acts as a persistent server that 
can be controlled and interrogated by 
one or more applications. The device 
control abstracts the details of the 
hardware underneath it and acts as a 
complete server for that device. The 
applications) interact with the device 
control via an ActiveX interface which 
ia scriptable. (ie a few lines of 
VBScript within an HTML page can control 
a Kalypso control) - 

The device controls are fully 
concurrent- That means that they run 
independent of each other in ~paral lel__ 



t 



t 
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rself Service" 
Controls 



t 



"I? .Comms "Control. 



-rKis-rlWriy-^^ 

kiosk as the cycle time of a transact.cn 
is critical- Kalypso allows all devices 
to be controlled concurrently. This also 
m eans that these controls can execute 
commands asynchronously- ie , the 
application can ask a control to do 
something while the application does 
something else- Once the control has 
completed it's task, it reports back 
with the result (success or failure) via 
an ActiveX events. This event-driven 
design makes it easy to create 
applications using browser technology- 
Th ere are various web tools that provlae 
easy-to-use graphical interfaces for 
creating event -dri ven applic at^__ 
■ThV-s^Tr^eTvTc^o^rols proviai 



1"8. Status Monitoriuy 



xn*=5 o^-u^- - — 

functionality that is necessary for 
creating self-services applications. 
These controls have the same -server" 

Hptfice controls and 
architecture as the device c 

are able to execute commands 
asynchronously. Each of the controls is 
described in .ore detail in section^ 
The-c^mlT^^^ 

remote host computers using the OFX 
standard. These controls have the same 
-server- architecture as the device 
controls and are able to execute 
commands asynchronously. 

^.H^rinfatur^^ „ 

~czV and sends 

the health of the ATM or Kioskjm _ 
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9 . pxtranet 



status and alerts to an exiemal 
monitoring station using SNMP alerts 



A very important te ature of Kalypso is 
it's support for Extranet based 
applications. An Extranet is a network 
connecting the Intranets of two or more 
companie^Ti^^ider^j-^Sgrio where a 
Bank and an [Airline choose to co- 
operate .[*fffci|ank hasg^ork of ATMs 

(say) and the Airline has a network of 

ticketing kiosks. 



Now consider that Kalypso is running on 
the kiosks and the ATMs . The Bank can 
run the Airline ticketing application on 
the Bank's ATMs by simply setting up a 
web link from the Banking application to 
the Airline application- Similarly the 
Airline can run the banking application 
on it's kiosks. 

No w consider the fact that the kiosk and 
the ATM have different hardware types 
and capabilities- Kalypso's support for 
WOSA XFS takes care of the vendor 
dependent hardware differences. 
Kalypso's support for "capabilities" 
(see below) takes care of the capability 



7- 
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differences . 



The support for capabilities means that 
the application can interrogate the 
device controls as to their 
capabilities- That means that banking 
application (for instance) . when running 
on the airline kiosk knows it cannot 
dis pense cash, but can offer most other 
banking services (eg statements, balance 
enquiry etc) . 

Similarly, the Airline application can 

hnv an E-ticket (say) 
allow the user to buy an 

and pay for it, but the application 
k nows. that it cannot dispense a board.ng 
card (say) - 

Now consider what happens when other 
partner companies join the extranet. For 
instance a supermarket and an insurance 

Thi c would allow the 
company might uoin. This wou 

. 0 _cprvices of the 

combined set of e serv. 

partners to be made available through 
■th. combined set of kiosks and ATMs - In 
ord er to make this possible there are 
three important requirements, all of 
wh ich are satisfied by Kalypso : 

. The middleware (ie Kalypso) must be 

web-enabled 
. The middleware must be hardware 

independent 
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1 X .Differentiation 
■and 

. standardisation 



capab ilities must be implemented so 
that differing hardware capabilities 
can be managed 



All - Kalypso controls impxemen^ - 

capabilities" interface. This interface 
allows the application to interrogate 
the capabilities of the control as well 
as the device that it represents. This 
is a fundamental part of Kalypso 's 
Extranet support- It allows an 
application to dynamically configure the 
services that it can provide based on 
the capabilities of the hardware 

available on the kiosk. _ 

oHe-5Fthe business A equipments or the" 
OEM's and the end-user institutions that 
would use Kalypso is the ability to 
differentiate themselves from the 
competition. Kalypso on the otherhand 
provides a standard interface that may 
at first appear to disallow 
differentiation. This is not the case. 
Kalypso allows differentiation with 
standardisation. This is possible 
through capabilities. Kalypso is able to 
provide a superset of features from each 
hardware vendor using the capabilities 
interface to let the application decide 
whether it wishes to use the enhanced 
features. This means that new features 
can be added to Kalypso without 
requiring a "least-common denominator" 
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T2 ; . Controls run 
without the 
device 



T>3 . Ignore moae 



t 



1 4 . Security 



l^pl^cl^in^^ 

ensuring that there is only one way to 
access any particular feature. That 
means that all common features have a 
single API (therefore standardisation) 
while new features can be added without 
making the application dependent on xt 
(du e to the capabilities interface) - 

hence differentiation. 

-K^T^ rtant teatu r^f^lypio-^tFoT^ 
is that they run on an AT* even if the 
actual hardware device is not present, 
ia the cash dispenser control will run 
on' any kiosk. This allows an application 
tnat uses the cash control to startup 
and run. When it requests the 
capabilities of the control it will 
reply that the device is not present so 

the capabilities are N ull- 

Trthi-^sr^rtETdevxce xs not 



present, the application can request the 
control to run in the "ignore" mode. In 
this mode, the control will return 
•success- for every command. This allows 
the application to use generic code that 
does not need to test whether the devxce 
is present at each step. This simplif-s 
the code that needs to be written when 
writing an application to cope wxth 
various hardware capabilities. 



„.ch,his m . The purpose of this *^»- 
is to allow the -Methods" of the 
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controls to be enabled a nd disabled. 



1 5 . Concurrency 



This is particularly important in an 
Extranet environment where applications 
of differing abilities run on the kiosk 
or ATM . For instance a bank would wish 
to disallow the airline application 
(from our example) from dispensing cash. 
This is done through a key passing 
mechanism as follows: 

. The Kalypso security control allows 
the current security configuration of 
the ATM/Kiosk to be set. 
. Using the control, the owner of the 
kiosk can specify details of the 
security configuration (ie which 
-methods" are disallowed and which are 
allowed) - 

. Applications identify themselves to 
the security control via a digital 
certificate. This sets the security 
configuration as specified by the ATM 
owner - 

. if the application attempts to call a 
method of a control that is not 
allowed, a trap is generated. This 
allows control to pass to the ATM 
owner's application for cleanup. 
wiTiiiHTtioT^^ 



t 



t 



support concurrency- This means that all 
the controls can run independent of each 
other in parallel, and are able to 
execute commands asynchronously. _ 
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T he K a^5o"i?chitecture allows multiple 



t 



"Ofulti-processing 
Support 



17. Windows CE 



TIT. Multi -pi an ox m 
support 



applications to run simultaneously. This 
means that two or more applications can 
use the Kalypso interface without 

causing problems. 

Tne — Kalypso controls have been dv*^*3~ 
to allow them to be migrated to Windows 
CE. This would allow a single 
application to run on CE,95 and NT based 
kiosks and ATMs. ■ 
TEi-H5ility to run on various op-- L ^ 
systems and hardware means that a very 
wide range of kiosks and ATMs can share 
the same application. From a high-end 
ATM to a low-end portable kiosk, Kalypso 
provides a standard interface to web- 
based delivery of e- services- 



Software Design Concepts 



t 



concept 
TTActivex can joe~ 
replaced with 
Java beans. 



.Persistence 



— ■ ■ Description 

jj^^rTE^SKt^T^^ been d-^igTIed- 
usi ng Microsoft's ActiveX model, the 
underlying architecture is not dependent 
on ActiveX. Each Kalypso component is 
created as a C++ object which can be 
accessed by a light-weight ActiveX 
«hook» . This means that the ActiveX hook 
can be replaced by a Javabeans hook 
thereby providing the same features 
using the Javabeans component model. 



0He- of the pro BT^i- faced DY~^ 
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3:. Error handling 



- designer is that objects picke d on a web 
page have a very short life span - they 
survive to the end of the page and are 
destroyed when the page is changed. The 
ActiveX -hook" idea solves this problem 
for us. The underlying Kalypso object 
remains persistent while hooks on each 
page access the object- This means that 
the ActiveX control appears to be 
persistent to the application from page 
to page.. 

Lack of persistence provides an 
additional problem for the application 
developer: the storage of application- 
wide data. The Kalypso scratchpad 
control solves this problem. (See 
later) - . 



0He-35-the complications wltn err,, 
handling in ATM applications is that 
components can return a large number of 
error cases . Handling all these error 
cases immediately can lead to very 
complex code. Kalypso helps with this 
process by separating the responses it 
send to the application into two 
categories. "Good responses" and one 
error response. 

Most commands normally have a single 
good response and a single error 
response - Some commands can have more 
than one good response. The definition 



t 
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T' r Fatal error 
handling 



o l a good r esponse is a respond U.at 
allows the transaction to continue 
forward- In a bad response case, the 
current transaction flow would normally 
have to be aborted. In this case the 
control "flow would jump out of the 
normal flow process to handle the error 
situation. 

This means that the normal flow is not 
cluttered by handlers for each of the 
error cases that can occur at each 
st age. Control can be transferred to 
generic error handlers which can either 
attempt to recover from the error or 
abort the transaction completely. 

This design allows the application code 
to remain as clear and concise as 
possible while also encouraging the 
developer to handle all error cases by 
calling an error handle 



isr^nseiitio^^^ 

disallowed cases result in a fatal error 

exception being generated. This results 

in robust applications. The actual way 

in which the error is handles can be set 

by the application developer. The fatal 

error can be returned to the application 

fo r handling or it can be used to reboot 

the ATM. in the development environment 

^<= result in a message box 
fatal errors resuj-u 

being displayed. 
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liT~£ddition to the traditional «^ that 
ActiveX fire events to the container, 
Kalypso device and self-service controls 
are able to queue up events and return 
them one by one when requested. This 
allows C++ applications to be written in 
a linear fashion rather than an event 
driven fashion. The ability to write 
linear code makes it much easier to 
develop and maintain the complex logic 
required in self-service applications 



5. linear code 



6 .Self Service 
Controls 



• watchdog Control 



System Escape 
Control 



DdLaColle^f- 
Control 



The~self service subsystem consists oi 

the following controls: 

The watchdog "runs in a separate ni 
process and reboots the ATM if the 
application crashes. It does this by 
requiring the application to constantly 
poll it saying that it is ok. The 
watchdog control can also be used to 
daily reboot the ATM. 



The system escape c ontrol is used to 
reboot the ATM. It has a vendor specific 
"exit" which allows the hardware vender 
to modify it's behaviour. The system 
escape control ensure that cached data 
(eg in the DataCollect control and the 
Trace control) are flushed to disk 

before rebooting. _ 

Th is allows the ap plication to colleoL 
raw data for statistics. The application 
is able to log various events into this 
control. Each event is time stamped and 
stored on the hard disk for future 
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reference. As disk writes can take time, 
this control logs to memory but store on 
hard disk only when the ATM is idle. The 
storage for the DataCollect control is 
held in a fixed size disk file. This 
file is allocated at bootup to ensure 
that disk usage remains constant 
throughout. The file is used as a ring 
buffer- So, if the file size is set to 
10Mb in size, the last 10Mb of raw data 
will always be present on the ATM/Kiosk. 
The collected data would normally be 
exported to a remote location for 
analysis . 

The trace control is similar to tne 
DataCollect control except that it is 
used to collect trace events of the 
application and the underlying 
middleware. This is targeted mainly at 
the application developer to allow the 
software to be debugged. Normally 
tracing is turned on only when a problem 
is suspected. However this is a problem 
as tracing can affect the dynamics of a 
problem and make it harder to find bugs. 
Our approach is two fold: one to have 
tracing always enabled and two to 
address the reasons why tracing is not 
normally always enabled: performance and 
disk usage - 



Performance problems are eliminated by 
tracing to memory. The trace is writte: 
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to disk only when the ATM is idle. (All 
ATMs go through an idle cycle between 
two users. This is a relatively long 
time even when people are queuing at the 
ATM) . - 

The disk usage problem is eliminated by 
using a ring buffer and guaranteeing the 
file size as for the DataCollect 
control - 

The fact that tracing is always enabled 
also means that it makes it much easier 
to catch one-off problems. Normally 
tracing is enabled after a problem is 
reported - a bit too late to catch the 
problem especially if it is a rare 
event . 

In addition the trace control has a 
special, ATM vendor dependent feature. 
Some ATMs have a limited amount of non- 
volatile RAM. The trace control writes 
the most recent trace information. to 
this RAM in a ring buffer fashion. As 
the RAM is <iuick to access this does not 
cause a performance problem. However, if 
the ATM freezes up or crashes for an 
unknown reason the RAM contains the 
trace of what happened just before. (In 
the case of a freeze of this sort 9 , any 
unflushed trace data would have been 
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• Scratchpad 
Control 



• Supervisor 
Application 



t 



lost , if not for the non-volatile RAM) 



We mentioned earlier that browsers do 
not allow objects or data to persist 
across pages, by default- The scratchpad 
control on the otherhand has a 
persistent object at it's core and 
allows the application to store and 
retrieve data at any time. The control 
supports the Vbscript "variant" type 
which allows all types of data to be 
stored and retrieved. This control also 
allows data to be shared between 
multiple applications. This is done by 
marking the data as being shared. 



Kalypso allows the supervisor 
application to be run simultaneously as 
a separate application. This means that 
on an ATM with a rear screen the 
operator can interact with the ATM 
without taking the machine offline. It 
allows the operator to access statistics 
etc while there is a user at the front 
of the machine. If the operator wishes 
to carry out intrusive maintenance 
functions, he would then have to take 
the machine out of service. Thus the 
supervisor application can run in on- 
line mode or off-line mode, providing 
only a subset of features in the on-line 
case - 



• 'Security Control 



• Registry Control 



This was detailed earner! " 

This cont rol allows the Windows NT 

registry to be manipulated by the 
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Direct royTree 
.control 



application. 



AppLauncher 
control 



'INI file control 



This control allows the a Windows INI 
file to be read from the browser. 



• : FTP EXE 



• ^Signature capture 
control and SP 



This control allows a signature capture 
device to be supported. 



• Key capture 
Control 



• Popup suppression 
control 



This control allows special windows Keys 
such as ctrl-alt-del and alt-tab to be 
captured. This is essential in kiosk 
applications that have a full PC 
keyboard . 

"This control allows popup windows to be 
monitored and captured. This is useful 
to allow software components from other 
vendors to be used in a self service 
application . 

Most software is not written to be used 
in a self service environment. This 
means that these software components 
expect to be able to talk directly to 
the user via popup windows. This is 
unacceptable in a self service 
environment. (The main application must 
have a complete monopoly over the user 
dialog). This means that a large amount 
of PC software components cannot 
normally be used in an ATM/Kiosk 
environment . 
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The Kalypso popup control goes someway 
in helping with this process. This 
control monitors popups, and when a 
popup occurs recognise it, and executes 
a pre -determined sequence of tasks, (eg 
hide the popup and press the OK button) . 
The popup control can do this quickly 
enough so that the user should not 
notice the popup occurred at all. This 
allows a large range of software 
components to be used in creating self- 
service applications. 

For example, we recently used a third 
party fax utility to send faxes from a 
kiosk. This software would popup to 
inform the user of the progress of the 
fax. Our control intercepts the popup 
and presses the OK button, and -notifies 
the main application of the progress of 
the popup, allowing the application to 
deal with the status change. 


• 'Global config 
file control 




• iTelephony control 




• iSSMS control 




• "Timer control 




* Screensaver 
, control 




• -Multiple language 
•control 
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♦ 'Clock synch 
control 








7 .'Windows NT 

standard printer 
support 


• 


8. Printer SP - html 
field 




9JPrinter SP - 
Flush 




iCLThe Kalypso API 




~TT= . Smartcard 
support 


PC/SC support 


1 i 
\ A - 




Software Implementati 


on Concepts 


; Concept 


Description 


1 -Asynchronous 
methods 


All device and selt-service control 
methods which are expected to have 
appreciable duration are implemented 
asynchronously. This allows the 
application to carry on other tasks in 
parallel with the method execution. 


2 i Commands by name 
not number 


'^rKough based on WOSA, which assigns a 
different number to each command, 
„, lvtlso controls have differently named 
methods and events associated with each 
operation . 


3 I Mapping of WOSA 
events to set of 


' a typical WOSA command may, on 

completion, generate one of 30 to 50 
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.completion events 



4.;Small number of 
completion events 

necessary 
results only 



5 .DeviceError event 
for all device 
errors 



6 .iStatus as 
properties 



7 JCapabilities as 

properties 

8 jEvent thread for 



handling async 
commands 



different events in principle. Dealing 
with so many events is time-consuming 
and error prone for the application 
writer. Kalypso reduces the set of 
possible outcomes to a small number of 
completion events which are clearly 
named: outcomes which can only happen if 
there is a bug in the application cause 
a fatal error to be triggered. 



The number of possible completion events 
for each method is kept to a minimum: 
this makes it easy for the application 
writer to develop reliable code rapidly. 



All methods that involve an action on a 
device can generate the DeviceError 
event if there is some kind of hardware 
failure. Having one event to cover all 
different types of device error allows 
the application writer to write one 
handler which examines the status 
properties of the controls to determine 
what action to take: the error handling 
code can be encapsulated rather than 
scattered over many event handlers. 



All Kalypso controls create their own 
thread, called the event thread, when 
first constructed- This enables 
asynchronous operations to be carried 
out: when an asynchronous method is 
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9-1WOSA session 
automatically 
■opened 



1Q.WOSA session 
maintained 
between pages 



1 T .Timeouts ior 
interactive 
methods only 



T - ?. Cancel tor 
; appropriate 
methods only 



called, a command message is sent to the 
event thread. The event thread carries 
out the command and sends a message back 
to the main thread on completion: the 
completion message causes the 
appropriate event to be fired- Doing 
commands using the event thread means 
the main thread (the application) is 
free to get on with other tasks in 
parallel. The event thread also ensures 
that the device state persists from one 
application page to another: though the 
controls on the HTML pages are being 
continually created and destroyed, the 
event thread remains running and ensures 
that the connection to the device is 
never lost. 

The WOSA session is automatically openea 
when a Kalypso device control is first 
used: there is no need to manually call 
an Open method* 



See event thread discussion above, 



Though all WOSA methods require a 
timeout to be provided, the timeout is 
not appropriate or meaningful for the 
majority of commands. Kalypso requires 

a timeout to be supplied only where it 

is meaningful to do so. 

WOSA all ows a cancel command to Be sent 
after any other commands. In reality it 
is only possible to cancel certain 
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1 3 : - Request Ids 
abstracted out 



1 4^. Reentrant object 
layer for 
irmltithread/ 
multiprocess 



operations: Kalypso provides cancel 
methods only for those operations which 
can really be cancelled. 



WOSA returns request ids associated for 
each asynchronous operation. Request 
Ids are abstracted out in Kalypso. 



T?.No direct WOSA 
access 



1 6:. Invisible frame 
for unsolicited 
(events 



Some applications need to be able to 
react on an event no matter at what 
stage the event occurs - for instance if 
the safe door is opened, the application 
may need to shut down immediately. This 
is not easy in web base applications 
because it can mean that every single 
page needs to contain some code to 
handle the event. This problem can be 
solved using frames: the idea is that 
all visual aspects of the application 
and the main control flow will be 
carried out in one frame that fills the 
whole screen. However a second frame 
will be constantly running along side 
the main frame which will take up no 
screen space. The invisible frame can 
include all the device controls needed 
to detect the events that must be 
reacted on - and this frame can take 
control and close down the main frame 
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(or whatever) when it detects one ot tne 
relevant events. 
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Software Testing Concepts 



Concept 


Description 


1 Automatic testing 




2. HTML based 

testing in stress 
testing mode or 
user mode. 


A test HTML based application has been 
developed for testing Kalypso device 
controls. The application allows the 
operator to select a subset of the 
devices for testing. For each device, 
two test sequences are defined: there is 
a test sequence requiring operator 
interaction (for entering/removing card 
etc) and one requiring no operator 
action. If the latter sequence is 
chosen, the interaction-rree te&i. 
sequences will be repeatedly run for the 
selected devices- This allows Kalypso 
to be easily stress tested. if a more 
complete test is required, the sequence 
with operator interaction is chosen and 
the application leads the operator 
through a detailed test sequence for the 
chosen devices. In both cases, testing 
is as automated and therefore repeatable 
as possible* 
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Further modifications and improvements may be 
incorporated without departing from the scope of the 
invention herein intended 
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